Atlassian 脆弱性

タイムライン

タイプ

製品

Atlassian Data Center127
Atlassian JIRA Server114
Atlassian Crucible45
Atlassian JIRA40
Atlassian FishEye39

修復

Official Fix326
Temporary Fix0
Workaround0
Unavailable0
Not Defined26

悪用可能性

High14
Functional0
Proof-of-Concept7
Unproven0
Not Defined331

アクセスベクター

Not Defined0
Physical0
Local7
Adjacent13
Network332

認証

Not Defined0
High29
Low156
None167

ユーザー操作

Not Defined0
Required81
None271

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤430
≤594
≤6106
≤749
≤843
≤920
≤109

CVSSv3 Temp

≤10
≤20
≤31
≤433
≤5106
≤6106
≤746
≤833
≤919
≤108

VulDB

≤10
≤20
≤313
≤440
≤5105
≤684
≤751
≤849
≤92
≤108

NVD

≤10
≤20
≤30
≤42
≤544
≤662
≤758
≤831
≤931
≤1025

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤70
≤86
≤99
≤106

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k92
<2k170
<5k86
<10k0
<25k0
<50k1
<100k3
≥100k0

本日のエクスプロイト

<1k348
<2k1
<5k0
<10k0
<25k3
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (60): Activity Streams (1), Application Links (4), Assets Discovery Cloud (1), Assets Discovery Data Center (2), Atlasboard (1), Atlaskit (1), Bamboo (15), Bamboo Data Center (2), Bamboo Server (1), Bitbucket (3), Bitbucket Data Center (3), Bitbucket Server (11), Bitbucket Server and Data Center (2), Companion App (3), Confluence (13), Confluence Data Center (15), Confluence Questions (2), Confluence Server (35), Connect Express (1), Connect Spring Boot (2), Crowd (8), Crowd Data Center (2), Crowd Server (1), Crucible (45), Data Center (127), Doxygen for Atlassian Confluence (3), Eucalyptus (1), FishEye (39), Fisheye (5), Floodlight Controller (2), HipChat (1), Hipchat Server (1), JIRA (40), JIRA Core (1), JIRA Server (114), JIRA Server for Slack Plugin (1), JIRA Software (1), Jira (6), Jira Align (2), Jira Core Data Center (1), Jira Data Center (4), Jira Server (2), Jira Service Desk Data Center (3), Jira Service Desk Server (5), Jira Service Management (2), Jira Service Management Data Center (1), Jira Service Management Server (8), Jira Service Management Server and Data Center (1), Jira Software Data Center (1), Micrium uC LIB (1), Micrium uC OS (1), Navigator Links (1), OAuth Plugin (1), SourceTree (5), Universal Plugin Manager (3), User Management for Bitbucket (1), User Management for Confluence (1), atlassian-gadgets (1), gajira-comment (1), gajira-create (1)

Link to Vendor Website: https://www.atlassian.com/

公開済みBaseTemp脆弱性Prod修復EPSSCTICVE
2024年04月16日8.88.6Atlassian Confluence Data Center System Call 特権昇格未知Not DefinedOfficial Fix0.000430.05CVE-2024-21676
2024年03月19日7.97.7Atlassian Confluence Data Center ディレクトリトラバーサル未知Not DefinedOfficial Fix0.000430.06CVE-2024-21677
2024年02月20日6.05.9Atlassian Confluence Data Center クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000430.04CVE-2024-21678
2024年02月20日7.27.0Atlassian Assets Discovery Data Center 弱い認証未知Not DefinedOfficial Fix0.000450.04CVE-2024-21682
2024年01月16日9.99.7Atlassian Confluence Data Center/Confluence Server Template 特権昇格未知HighOfficial Fix0.974360.04CVE-2023-22527
2024年01月16日8.28.1Atlassian Confluence Data Center/Confluence Server 特権昇格未知Not DefinedOfficial Fix0.001730.02CVE-2024-21672
2024年01月16日7.17.1Atlassian Confluence Data Center/Confluence Server 情報の漏洩未知Not DefinedOfficial Fix0.001650.03CVE-2024-21674
2024年01月16日7.77.6Atlassian Confluence Data Center 特権昇格未知Not DefinedOfficial Fix0.001510.02CVE-2023-22526
2024年01月16日7.87.7Atlassian Confluence Data Center/Confluence Server Environment 特権昇格未知Not DefinedOfficial Fix0.001290.00CVE-2024-21673
2023年12月06日9.49.3Atlassian Companion App Websocket Remote Code Execution未知Not DefinedOfficial Fix0.002120.02CVE-2023-22524
2023年12月06日9.59.3Atlassian Assets Discovery Cloud Assets Discovery Agent Remote Code ExecutionCloud SoftwareNot DefinedOfficial Fix0.001040.03CVE-2023-22523
2023年12月06日8.48.3Atlassian Confluence Data Center/Confluence Server Template 特権昇格未知Not DefinedOfficial Fix0.001090.03CVE-2023-22522
2023年11月21日7.87.7Atlassian Crowd Data Center/Crowd Server Privilege Escalation未知Not DefinedOfficial Fix0.000970.00CVE-2023-22521
2023年11月21日8.38.2Atlassian Bamboo Data Center/Bamboo Server Privilege Escalation未知Not DefinedOfficial Fix0.000970.05CVE-2023-22516
2023年10月31日8.78.7Atlassian Confluence Data Center/Confluence Server 特権昇格未知HighNot Defined0.966340.00CVE-2023-22518
2023年10月04日9.99.7Atlassian Confluence Server/Confluence Data Center Remote Code Execution未知HighOfficial Fix0.972060.05CVE-2023-22515
2023年09月19日8.38.2Atlassian Bitbucket Data Center/Bitbucket Server Privilege Escalation未知Not DefinedOfficial Fix0.000970.05CVE-2023-22513
2023年07月19日7.97.8Atlassian Bamboo Data Center System Call 特権昇格未知Not DefinedOfficial Fix0.001130.01CVE-2023-22506
2023年07月19日8.38.2Atlassian Confluence Server/Data Center Privilege Escalation未知Not DefinedOfficial Fix0.000900.05CVE-2023-22508
2023年07月19日7.87.7Atlassian Confluence Server/Data Center Privilege Escalation未知Not DefinedOfficial Fix0.000900.02CVE-2023-22505
2023年06月26日4.44.4Atlassian Jira TechTime User Management クロスサイトスクリプティングBug Tracking SoftwareNot DefinedNot Defined0.000450.00CVE-2023-36662
2023年05月25日5.75.6Atlassian Confluence Server 特権昇格未知Not DefinedOfficial Fix0.000560.04CVE-2023-22504
2023年05月02日5.35.2Atlassian Confluence Server/Data Center Attachment 情報の漏洩未知Not DefinedOfficial Fix0.000710.03CVE-2023-22503
2023年02月01日8.38.3Atlassian Jira Service Management Server and Data Center 弱い認証Bug Tracking SoftwareNot DefinedNot Defined0.002120.00CVE-2023-22501
2022年11月17日8.58.4Atlassian Crowd REST API 弱い認証未知Not DefinedOfficial Fix0.001800.05CVE-2022-43782

327 非表示のエントリあり

Want to stay up to date on a daily basis?

Enable the mail alert feature now!